Cortex XSIAM Resident Engineer
Listed on 2026-10-26
-
IT/Tech
Cybersecurity
We are looking for an experienced Cortex XSIAM Resident Engineer to work onsite with our customer as the main technical owner of their Palo Alto Networks Cortex XSIAM platform. The engineer will run, tune and improve the platform day to day. The role covers data onboarding, detection engineering, automation so the customer gets real security value from the platform.
Opening Date: 10/18/2026 | Closing Date: 11/18/2026
Category:
Technical
Location :
Riyadh, KSA
Key Responsibilities
Operate, administer, and maintain the customer’s Cortex XSIAM platform onsite.
Onboard log sources and build parsing and data modeling rules.
Create and tune correlation rules, BIOCs, and detections mapped to MITRE ATT&CK.
Develop and maintain automation playbooks and integrations.
Write XQL queries for threat hunting, investigations, and dashboards.
Prepare documentation, runbooks, and monthly reports.
Job Requirements
Bachelor’s degree in Computer Science, Communications Engineering, Information Security, or a related field.
5+ years in cybersecurity, including 3+ years in SOC/SIEM/SOAR engineering.
2+ years of hands‑on experience with Cortex XSIAM, XDR, or XSOAR.
Strong skills in XQL, playbook development, and Python scripting.
Good knowledge of networking, firewalls, EDR, and cloud security.
Palo Alto Networks Certified XSIAM Engineer (preferred).
Strong communication skills in English and Arabic.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).